SECURITY Signal 464
ATF responds to major cybersecurity incident after Qilin ransomware gang claims breach of standalone system
↗
The ATF is investigating a 'major' cybersecurity incident on a standalone system after the Russia-linked Qilin ransomware gang listed the federal law enforcement agency on its leak site.
The breach was confined to a standalone system isolated from ATF's enterprise network, but the DOJ's designation as a 'major incident' triggers federal investigation protocols. Qilin claimed 125 of 799 tracked ransomware incidents in July, making it one of the most prolific gangs currently operating.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
ATF confirmed the intrusion affected only a standalone system operating separately from its enterprise network, with no indication of impact on the ATF eForms system or any other ATF system.
The Qilin ransomware gang listed ATF on its leak site but provided no details on what data was allegedly stolen, how much, or samples to substantiate the claim.
Senior DOJ officials designated the compromise as a 'major incident' under federal guidelines, and ATF blocked connections to the affected IT environment upon discovering the incident.
THE CLUSTER